
Chapter XIII. Bypass Driver
Copyright ©2013.Chelsio Communications. All Rights Reserved. Page 190
Display a count of the number of
packets and bytes has matched a rule.
redirect ethX
create_table
Create a new table that is used to hold
a set of rules.
redirect ethX
activate_table
Activate a table so that all the rules in
it will be active.
redirect ethx
deactivate_table
Deactivate a table and its associated
rules.
redirect ethX
delete_table
Delete a table and the rules in it.
dump all tables and rules as
commands
* The matching algorithm for srcportmask and dstportmask is
(Ingress_Packet-Field & Filter-Mask) == (Filter-Value & Filter-Mask)
4.2.6. Managing persistent tables and rules
This example creates a new table with table id 1 and then adds a rule to drop all ICMP packets
for port 0. The rules in a table are not active until the table is activated.
Create a table:
[root@host]# redirect ethX create_table --table 1
Activate the table:
[root@host]# redirect ethX activate_table --table 1
Add a rule to the newly created table:
[root@host]# redirect ethX add --table 1 --proto icmp –-action drop –-port 0
The redirect dump command can be used to save the currently configured tables and rules
into a shell script.
Comentarios a estos manuales